Known vulnerabilities in Focus for iOS

Known vulnerabilities in Focus for iOS

Vendor: Mozilla

Software: Focus for iOS

Software CPE: cpe:2.3:a:mozilla:focus_for_ios:*:*:*:*:*:*:*:*

Website: https://www.mozilla.org

Total vulnerabilities: 10

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Vulnerabilities (10)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU134514 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-11799	CWE-79	Medium	No	No	151.3.1	15.06.2026	SB2026061534
#VU115477 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing) CVE-2025-10290	CWE-451	Low	No	No	143.0	16.09.2025	SB20250916216
#VU108128 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing) CVE-2025-3859	CWE-451	Medium	No	No	138.0	02.05.2025	SB2025050222
#VU99492 - Security Features CVE-2024-10474	CWE-254	Low	No	No	132.0	29.10.2024	SB2024102968
#VU96778 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing) CVE-2024-8399	CWE-451	Medium	No	No	130.0	04.09.2024	SB2024090407
#VU89642 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing) CVE-2024-5022	CWE-451	Medium	No	No	126.0	20.05.2024	SB2024052002
#VU86743 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-26284	CWE-79	Medium	No	No	123.0	23.02.2024	SB2024022306
#VU86742 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-1563	CWE-79	Medium	No	No	123.0	23.02.2024	SB2024022306
#VU85811 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-0606	CWE-79	High	No	No	122.0	26.01.2024	SB2024012605
#VU85809 - Security Features CVE-2024-0605	CWE-254	High	No	No	122.0	26.01.2024	SB2024012605